Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9680f06e7b93ff2b4ceeba73952aa4e8a094d161.roa
File:                     9680f06e7b93ff2b4ceeba73952aa4e8a094d161.roa (raw, json)
Hash identifier:          61mnwT4gFifkR9+8E9OspZzVyfhiqOER35QTnFpSsWI=
Subject key identifier:   5A:EC:E3:2B:4F:E0:28:D3:C5:80:41:6D:AC:F5:83:FF:5D:51:A7:E6
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FE649
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9680f06e7b93ff2b4ceeba73952aa4e8a094d161.roa
Signing time:             Wed 24 Mar 2021 14:44:08 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041993 (0xfe649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=9680f06e7b93ff2b4ceeba73952aa4e8a094d161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:aa:09:5a:1a:4d:c4:1b:b8:7e:fe:82:82:
                    57:f0:de:9e:ab:d8:b5:c4:85:5b:53:14:a4:7e:3a:
                    40:4f:87:1e:84:c4:ce:82:fa:d1:27:53:94:2c:05:
                    d6:25:31:25:af:fb:e2:c6:06:d0:dc:63:7e:30:d0:
                    69:21:e8:d5:39:af:53:ca:1e:87:ba:fb:62:eb:4b:
                    e2:4e:24:98:a6:13:a1:47:b5:b0:44:2e:90:be:db:
                    4b:33:f9:3b:ab:3c:07:9f:99:53:69:07:de:3e:0a:
                    a2:d2:f4:c4:48:c8:b4:74:c8:51:ec:ce:48:32:96:
                    b0:6c:16:ba:4c:ef:72:13:8a:ab:59:95:f1:a3:e5:
                    51:94:e8:ac:bc:c9:a2:cf:7f:71:8a:ad:75:2c:26:
                    40:6e:b6:31:b1:a9:2e:df:91:7f:4c:14:45:44:ee:
                    5a:dc:74:0f:54:e6:2d:50:5b:1a:e8:b6:f3:4f:75:
                    e5:56:59:a8:fa:1a:13:48:93:af:46:fa:92:8b:97:
                    c5:3d:05:a1:4d:01:2f:49:e2:bf:04:5f:05:50:a1:
                    f9:83:1f:c3:7c:1c:04:ed:7e:9a:fa:32:18:78:56:
                    a9:81:57:ee:6d:1c:f5:5a:b1:83:c4:30:9e:47:e9:
                    b3:e7:b5:c4:cb:89:4a:37:ba:d3:cf:23:13:6d:fc:
                    4f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EC:E3:2B:4F:E0:28:D3:C5:80:41:6D:AC:F5:83:FF:5D:51:A7:E6
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9680f06e7b93ff2b4ceeba73952aa4e8a094d161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:5d:56:da:f6:e0:b1:f7:81:85:a0:5b:0e:f4:df:1e:8b:f7:
         1b:d6:96:d7:7a:85:86:fa:8e:13:d1:0b:fd:8e:6a:4f:48:f0:
         9f:c1:47:e2:a7:ab:b4:3b:24:15:3b:01:91:2c:7e:5c:19:e3:
         b2:24:e9:b1:1f:60:fb:13:12:f1:25:4b:c4:ad:b5:b4:c4:0f:
         ef:c9:b0:d6:52:9e:c3:9e:39:8a:87:18:7e:f7:19:29:e3:c4:
         3f:8c:2c:6d:d6:b3:32:1f:aa:62:ea:68:6f:1d:39:58:3b:b3:
         2b:c7:45:ad:3d:38:d9:54:8d:65:f7:f5:ec:32:cc:97:6a:3e:
         9a:03:0f:ac:7d:25:a7:65:de:14:ec:ec:c9:cb:56:99:48:d4:
         ac:20:2a:1c:89:06:91:90:e9:8c:14:bf:72:d8:2f:c8:cb:4d:
         76:87:f4:fb:74:9d:99:08:de:f1:49:10:43:d1:9f:e5:bd:98:
         ea:61:a1:86:d4:68:bf:83:b6:ed:9c:a8:2e:98:48:83:6b:d8:
         86:a3:03:4d:c7:f6:f1:45:6e:41:06:5d:7d:8a:a2:e2:eb:90:
         2d:0a:6c:c7:d9:3e:20:9e:1b:2d:25:77:9e:68:c6:72:0a:c7:
         4b:c6:3c:75:28:52:04:e9:4b:a9:98:b6:17:76:84:c3:7b:e2:
         11:1a:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org